Cloud Security

This article focuses on O & M security and is not very specific. It is mainly a keyword summary. Take CentOS as an example:0x01Physical protection1. Guide grub. conf to add a password Title xxx linux server root (hd0, 0) password 123321 // plaintext

I. ARP spoofing-based data stream redirection1.1 ARP and Its workflow ARP is short for Address Resolution Protocol (Address Resolution Protocol). RFC826 describes its functions as follows: resolve the network layer protocol address of the computer

I am also a newbie myself. I haven't been in touch with linux for a long time. I recently encountered a problem when I learned the BASH export command (the book says that export is used to change a custom variable to a system environment variable ):

#! /Bin/bash#*************************************** *************************## ScriptName: pm# Author: osdba# Create Date: 2010-01-31# Modify Author:# Modify Date: 2010-01-31# Function: show processes memory used#***********************************

Previously, the script used the save mode. Now, the command is appended to a file. In this way, you can easily modify the file twice. The script is basically like this. You can modify it as needed ~ Add functions or something. #! /Bin/bashwhile

Because http is transmitted in plain text, the information on the site is easily visible to others. To ensure the security of our site, there are three common methods: authentication, source control, and encrypted access (https ). 1.Identity

All kinds of viruses have been put together today. Once you find that your computer is abnormal, it is regarded as a virus, and anti-virus software is everywhere, in short, it does not seem to find the "culprit". As a result, the virus software is

Symptom Description: Is there a trojan during Webpage Browsing? Of course, due to IE5.0's own vulnerabilities, this new intrusion method is possible by exploiting Microsoft's eml file vulnerability that can embed ex files and placing Trojans in eml

[Connected E-commerce system architecture] technical architecture of e-commerce websites with more than 1 million visitsServer security has always been a top priority for websites. There are a variety of security solutions. For Linux Server

SupperRadius enterprise V3.0 SQL injection vulnerability SupperRadius enterprise V3.0 SQL Injection VulnerabilityThe broadband used for home Internet access happens to be charged with supperradius. An SQL injection vulnerability exists in web

When learning varnish these two days and learning vcl, I don't understand the difference between pipe and pass and how to differentiate and apply it. After two days of searching, the concept was finally clarified. Now I will share my record with you

0x00 background After reading the WordPress 3.8.2 patch analysis HMAC timing attack, the eye is wide open. In the past, we can use time difference to determine HMAC. However, I always think this vulnerability is not a simple fix. According to

1. determine whether there are any injection points; And 1 = 1 and 1 = 2 2. Generally, the name of a table is admin adminuser user pass password ..And 0 <> (select count (*) from *)And 0 <> (select count (*) from admin)-determine whether the admin

To enter the front-end store system has laid a solid foundation http://inner.7daysinn.cn/FindHotel/Default.aspx internal system some functions by the button disabled to restrict permissions this way is equivalent to the virtual, through the browser

Official Website: http://www.doorgets.com/CVE: 2014-1459 FROM: http://www.exploit-db.com/exploits/31521/ exp:  

The 0-day elevation method of 03 system under Aspx has a high success rate. However, the following conditions must be met:1. webshell supports aspx2. Execute the cmd command3. The system disk has a writable and readable directory.The tools to be

After successful exploitation of the vulnerability, the security events caused by cross-site scripting and SQL injection are no longer new things. To prevent such attacks, is the security team still ready to "make up for nothing?Efficient security

Various simple tests such as Permission Bypass, upload, XSS, and SQL Injection for any of our CRM systems A company's internal network used this system. The first time I saw it, I couldn't help looking at WEB applications ~~ 1. UploadSignature

Is "get" secure or "post" secure? This may be a summary of the content that must be analyzed, because it involves the security of the content transmitted from the browser to the server. improper selection will bring about a huge insecurity, this may

The latest version of XDCMS enterprise management system, due to lax filtering, can bypass restrictions, resulting in SQL injection in the XDCMS enterprise management system login function, look at \ system \ modules \ member \ index. PHP file: